Threat actors

135 actors tracked across public CTI reporting, most recently active first. Activity is shown on a 7-day delay.

Dragonforce

84 reports

Incransom

48 reports

Play

29 reports

Turla

8 reports

Akira

80 reports

Nova

53 reports

Mini Shai-Hulud

3 reports

Payload

22 reports

Chaos

12 reports

Ailock

8 reports

Cmdorganization

21 reports

Prinzeugen

6 reports

Nightspire

39 reports

Krybit

30 reports

Anubis

11 reports

Interlock

5 reports

Insomnia

3 reports

UNC6508

4 reports

Icarus

18 reports

Scattered Spider

15 reports

Qilin

161 reports

KongTuke

5 reports

Gamaredon

6 reports

Morpheus

4 reports

Auditteam

9 reports

Evil Corp

5 reports

Stormous

18 reports

ShinyHunters

59 reports

Huione Group

3 reports

Bravox

8 reports

Worldleaks

18 reports

Lapsus$

6 reports

Apt73

12 reports

Aurora

13 reports

Safepay

34 reports

Braincipher

7 reports

Storm-2603

5 reports

GrayBravo

3 reports

EvilTokens

5 reports

Volt Typhoon

7 reports

APT28

10 reports

Lockbit5

60 reports

Thegentlemen

124 reports

LockBit

10 reports

RansomHub

9 reports

Pear

13 reports

Gentlemen

4 reports

Cloak

4 reports

Shadowbyt3$

13 reports

TeamPCP

42 reports

Oleksii Oleksiyovych Lytvynenko

3 reports

Ghostwriter

5 reports

UAT-8616

9 reports

Rhysida

7 reports

INC

9 reports

Lynx

4 reports

SHADOW-AETHER-015

3 reports

Genesis

21 reports

Lamashtu

9 reports

Ransomhouse

6 reports

Spacebears

14 reports

Silentransomgroup

11 reports

Vanilla Tempest

7 reports

FishMonger

3 reports

ScarCruft

3 reports

Contagious Interview

3 reports

Deadlock

11 reports

Outsider

3 reports

Black x

5 reports

Threeam

12 reports

Coinbasecartel

13 reports

Conti

3 reports

Gunra

6 reports

Direwolf

6 reports

M3rx

11 reports

Void Blizzard

3 reports

FAMOUS CHOLLIMA

4 reports

Nimbus Manticore

5 reports

OceanLotus

3 reports

MuddyWater

13 reports

Nightmare Eclipse

8 reports

Salt Typhoon

8 reports

Termite

6 reports

Miasma

3 reports

Mustang Panda

4 reports

NSO Group

4 reports

Fox Tempest

7 reports

TA4922

4 reports

Handala

3 reports

Clop

7 reports

UNC5221

3 reports

GHOST STADIUM

5 reports

UTA0355

4 reports

APT29

4 reports

CL-CRI-1089

3 reports

Ababil of Minab

4 reports

Handala Hack Team

5 reports

Chronus Team

4 reports

Sandworm

9 reports

Killsec

3 reports

Storm-2949

4 reports

Kairos

5 reports

Abyss

3 reports

GREYVIBE

4 reports

BlackSuit

4 reports

Glassworm

5 reports

TGR-STA-1030

3 reports

Titan

9 reports

0day Syndicate

5 reports

Kimsuky

4 reports

Everest

11 reports

NoName057(16)

8 reports

Russia

3 reports

Lazarus

5 reports

FamousSparrow

3 reports

Scattered LAPSUS$ Hunters

3 reports

Silver Fox

3 reports

Lazarus Group

4 reports

Jacob Butler

4 reports

Storm-0249

4 reports

Storm-2561

3 reports

Storm-0501

4 reports

BlackCat

4 reports

UNC5174

3 reports

Warlock

3 reports

REvil

5 reports

Tren de Aragua

3 reports

FiveFamilies

3 reports

TAG-141

3 reports

TAG-144

3 reports

Crypto24

3 reports

Dark Caracal

3 reports

Storm-1516

3 reports

cl0p

3 reports

PlushDaemon

3 reports

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.